4 results · Feed
-
Critical 10.0
heap buffer overflow in libaom
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the…
-
Unscored —
aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.
-
Unscored —
aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
-
Unscored —
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.